The bfdmachoi386canonicalizeonereloc function in bfd/mach-o-i386.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29 and earlier, allows remote attackers to cause an out of bounds heap read via a crafted mach-o file.
{ "ubuntu_priority": "low", "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "binaries": [ { "binary_name": "binutils", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-aarch64-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-alpha-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-arm-linux-gnueabi", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-arm-linux-gnueabihf", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-dev", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-doc", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-hppa-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-hppa64-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-m68k-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-mips-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-mips64-linux-gnuabi64", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-mips64el-linux-gnuabi64", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-mipsel-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-multiarch", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-multiarch-dev", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-powerpc-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-powerpc-linux-gnuspe", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-powerpc64-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-powerpc64le-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-s390x-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-sh4-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-source", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" }, { "binary_name": "binutils-sparc64-linux-gnu", "binary_version": "2.26.1-1ubuntu1~16.04.8+esm1" } ] }